Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-08 Thread Andy Polyakov
I’m using OpenSSL as a module in PHP (php_openssl), and I need to call the CGI page may times per second but the initialization process in RAND_poll is too slow. I’m thinking to modify OpenSSL to use the rtlGenRandom call available in XP/2003 Server/Vista OSs (see

Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-05 Thread Jack Lloyd
On Sat, Dec 03, 2005 at 10:25:19PM +1100, Steven Reddie wrote: Can you elaborate on the situation where repeatedly initializing and shutting down CryptoAPI causes a large memory leak, See http://support.microsoft.com/default.aspx?scid=kb;en-us;258000 particularly why you needed to do this.

RE: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-03 Thread Steven Reddie
Hi Jack, I don't have huge issues with it myself (in terms of entropy generation, CryptGenRandom has been fairly painless compared to some other mechanisms), but CryptoAPI is somewhat big, and there are various annoyances, such as the fact that repeatedly initializing and shutting down

Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-02 Thread Corinna Vinschen
-us/seccrypto/security/cryptsetprovider.asp -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Corinna Vinschen Sent: Friday, 2 December 2005 7:59 AM To: openssl-dev@openssl.org Subject: Re: Alternate RAND_poll for XP/2003 Server/Vista On Dec 1 12:43

Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-02 Thread Jack Lloyd
On Fri, Dec 02, 2005 at 01:44:49PM +1100, Steven Reddie wrote: CryptGenRandom is available on all Windows back to Windows 95. RtlGenRandom is only available since XP, however CryptGenRandom makes use of it. Presumably RtlGenRandom has always been around, it's just never been documented or

RE: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Steven Reddie
That's an interesting blog article. The 2nd comment is by the author and lists the entropy sources. I recall there was discussion on this list quite some time ago where it was stated that OpenSSL wouldn't use only the CryptoAPI random number generator since Microsoft hadn't provided details

Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Corinna Vinschen
On Dec 2 00:45, Steven Reddie wrote: That's an interesting blog article. The 2nd comment is by the author and lists the entropy sources. I recall there was discussion on this list quite some time ago where it was stated that OpenSSL wouldn't use only the CryptoAPI random number generator

RE: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Adrià Massanet
in runtime. Adrià -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] En nombre de Steven Reddie Enviado el: jueves, 01 de diciembre de 2005 14:46 Para: openssl-dev@openssl.org Asunto: RE: Alternate RAND_poll for XP/2003 Server/Vista That's an interesting blog article

Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Jack Lloyd
On Fri, Dec 02, 2005 at 12:45:44AM +1100, Steven Reddie wrote: That's an interesting blog article. The 2nd comment is by the author and lists the entropy sources. I recall there was discussion on this list quite some time ago where it was stated that OpenSSL wouldn't use only the CryptoAPI

Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Rick Jones
Corinna Vinschen wrote: I'm wondering about this anyway. While the exact code of CryptGenRandom isn't open source, MSDN has a quite extensive description how the random numbers are generated by CryptGenRandom, see the Remarks section in

Re: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Corinna Vinschen
On Dec 1 12:43, Rick Jones wrote: Corinna Vinschen wrote: I'm wondering about this anyway. While the exact code of CryptGenRandom isn't open source, MSDN has a quite extensive description how the random numbers are generated by CryptGenRandom, see the Remarks section in

RE: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Steven Reddie
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Corinna Vinschen Sent: Friday, 2 December 2005 7:59 AM To: openssl-dev@openssl.org Subject: Re: Alternate RAND_poll for XP/2003 Server/Vista On Dec 1 12:43, Rick Jones wrote: Corinna Vinschen wrote: I'm wondering about this anyway

RE: Alternate RAND_poll for XP/2003 Server/Vista

2005-12-01 Thread Steven Reddie
RAND_poll for XP/2003 Server/Vista On Fri, Dec 02, 2005 at 12:45:44AM +1100, Steven Reddie wrote: That's an interesting blog article. The 2nd comment is by the author and lists the entropy sources. I recall there was discussion on this list quite some time ago where it was stated